diff --git a/content/chainguard/administration/cloudevents/events-reference.md b/content/chainguard/administration/cloudevents/events-reference.md
index 5f38706b72..40390b2244 100644
--- a/content/chainguard/administration/cloudevents/events-reference.md
+++ b/content/chainguard/administration/cloudevents/events-reference.md
@@ -4,7 +4,7 @@ lead: ""
 description: "Chainguard Events"
 type: "article"
 date: 2022-11-15T12:05:04
-lastmod: 2023-12-12T01:57:15
+lastmod: 2023-12-19T19:01:24
 draft: false
 tags: ["Enforce", "Reference", "Product"]
 images: []
@@ -81,7 +81,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: k8s://namespace-UID
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the namespace
-Ce-Time: 2023-12-12T01:57:15.365013935Z
+Ce-Time: 2023-12-19T19:01:24.253381921Z
 Ce-Type: dev.chainguard.admission.namespace.v1
 Content-Length: 282
 Content-Type: application/json
@@ -119,7 +119,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: k8s://namespace-UID
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the namespace
-Ce-Time: 2023-12-12T01:57:15.365234635Z
+Ce-Time: 2023-12-19T19:01:24.255069931Z
 Ce-Type: dev.chainguard.admission.namespace.v1
 Content-Length: 282
 Content-Type: application/json
@@ -158,7 +158,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: k8s://cluster-id
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of cluster
-Ce-Time: 2023-12-12T01:57:15.364783735Z
+Ce-Time: 2023-12-19T19:01:24.252551316Z
 Ce-Type: dev.chainguard.admission.v1
 Content-Length: 220
 Content-Type: application/json
@@ -195,7 +195,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: k8s://cluster-id
 Ce-Specversion: 1.0
 Ce-Subject: image ID e.g. us.gcr.io/prod-enforce-fabc/chainctl@sha256:123abc...
-Ce-Time: 2023-12-12T01:57:15.364113236Z
+Ce-Time: 2023-12-19T19:01:24.250638704Z
 Ce-Type: dev.chainguard.policy.validation.changed.v1
 Content-Length: 476
 Content-Type: application/json
@@ -213,12 +213,12 @@ User-Agent: Chainguard Enforce
   "body": {
     "cluster_id": "cluster identifier",
     "image_id": "image ID e.g. us.gcr.io/prod-enforce-fabc/chainctl@sha256:123abc...",
-    "last_seen": "2023-12-12T01:57:15.363961536Z",
+    "last_seen": "2023-12-19T19:01:24.250406402Z",
     "policies": {
       "name of the evaluated policy": {
         "change": "Can be [Empty, \"new\", \"degraded\", \"improved\"]",
         "diagnostic": "holds any diagnostic messages surfaced during policy evaluation",
-        "last_checked": "2023-12-12T01:57:15.364105136Z",
+        "last_checked": "2023-12-19T19:01:24.250625804Z",
         "valid": false
       }
     }
@@ -241,7 +241,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: cgr.dev
 Ce-Specversion: 1.0
 Ce-Subject: The identifier of the repository being pulled from
-Ce-Time: 2023-12-12T01:57:15.365610634Z
+Ce-Time: 2023-12-19T19:01:24.256047938Z
 Ce-Type: dev.chainguard.registry.pull.v1
 Content-Length: 757
 Content-Type: application/json
@@ -270,7 +270,7 @@ User-Agent: Chainguard Enforce
     "tag": "The tag of the image being pulled",
     "type": "Type determines whether the object being pulled is a manifest or blob",
     "user_agent": "The user-agent of the client who pulled",
-    "when": "2023-12-12T01:57:15.363978"
+    "when": "2023-12-19T19:01:24.250437"
   }
 }
 ```
@@ -290,7 +290,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: cgr.dev
 Ce-Specversion: 1.0
 Ce-Subject: The identifier of the repository being pushed to
-Ce-Time: 2023-12-12T01:57:15.365385035Z
+Ce-Time: 2023-12-19T19:01:24.255352633Z
 Ce-Type: dev.chainguard.registry.push.v1
 Content-Length: 687
 Content-Type: application/json
@@ -318,7 +318,7 @@ User-Agent: Chainguard Enforce
     "tag": "The tag of the image being pushed",
     "type": "Type determines whether the object being pushed is a manifest or blob",
     "user_agent": "The user-agent of the client who pushed",
-    "when": "2023-12-12T01:57:15.363961"
+    "when": "2023-12-19T19:01:24.250406"
   }
 }
 ```
@@ -338,7 +338,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/auth/v1/register
 Ce-Specversion: 1.0
 Ce-Subject: Chainguard UIDP
-Ce-Time: 2023-12-12T01:57:15.372990825Z
+Ce-Time: 2023-12-19T19:01:24.259251357Z
 Ce-Type: dev.chainguard.api.auth.registered.v1
 Content-Length: 154
 Content-Type: application/json
@@ -375,7 +375,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/events/v1/subscriptions
 Ce-Specversion: 1.0
 Ce-Subject: UIDP identifier of the subscription
-Ce-Time: 2023-12-12T01:57:15.370870828Z
+Ce-Time: 2023-12-19T19:01:24.264886692Z
 Ce-Type: dev.chainguard.api.events.subscription.created.v1
 Content-Length: 152
 Content-Type: application/json
@@ -411,7 +411,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/events/v1/subscriptions
 Ce-Specversion: 1.0
 Ce-Subject: UIDP identifier of the subscription to delete
-Ce-Time: 2023-12-12T01:57:15.370988028Z
+Ce-Time: 2023-12-19T19:01:24.265256995Z
 Ce-Type: dev.chainguard.api.events.subscription.deleted.v1
 Content-Length: 119
 Content-Type: application/json
@@ -447,7 +447,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/account_associations
 Ce-Specversion: 1.0
 Ce-Subject: UIDP with which this account information is associated
-Ce-Time: 2023-12-12T01:57:15.36868283Z
+Ce-Time: 2023-12-19T19:01:24.269872123Z
 Ce-Type: dev.chainguard.api.iam.account_associations.created.v1
 Content-Length: 385
 Content-Type: application/json
@@ -491,7 +491,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/account_associations
 Ce-Specversion: 1.0
 Ce-Subject: UIDP with which this account information is associated
-Ce-Time: 2023-12-12T01:57:15.36885803Z
+Ce-Time: 2023-12-19T19:01:24.270435027Z
 Ce-Type: dev.chainguard.api.iam.account_associations.updated.v1
 Content-Length: 336
 Content-Type: application/json
@@ -535,7 +535,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/account_associations
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the group whose associations will be deleted
-Ce-Time: 2023-12-12T01:57:15.36899343Z
+Ce-Time: 2023-12-19T19:01:24.270739029Z
 Ce-Type: dev.chainguard.api.iam.account_associations.deleted.v1
 Content-Length: 129
 Content-Type: application/json
@@ -571,7 +571,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/group_invites
 Ce-Specversion: 1.0
 Ce-Subject: group UIDP under which this invite resides
-Ce-Time: 2023-12-12T01:57:15.369631129Z
+Ce-Time: 2023-12-19T19:01:24.262502778Z
 Ce-Type: dev.chainguard.api.iam.group_invite.created.v1
 Content-Length: 145
 Content-Type: application/json
@@ -609,7 +609,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/group_invites
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the record
-Ce-Time: 2023-12-12T01:57:15.369807929Z
+Ce-Time: 2023-12-19T19:01:24.26288018Z
 Ce-Type: dev.chainguard.api.iam.group_invite.deleted.v1
 Content-Length: 92
 Content-Type: application/json
@@ -645,7 +645,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/groups
 Ce-Specversion: 1.0
 Ce-Subject: group UIDP under which this group resides
-Ce-Time: 2023-12-12T01:57:15.370448328Z
+Ce-Time: 2023-12-19T19:01:24.259825761Z
 Ce-Type: dev.chainguard.api.iam.group.created.v1
 Content-Length: 169
 Content-Type: application/json
@@ -682,7 +682,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/groups
 Ce-Specversion: 1.0
 Ce-Subject: group UIDP under which this group resides
-Ce-Time: 2023-12-12T01:57:15.370579128Z
+Ce-Time: 2023-12-19T19:01:24.260848067Z
 Ce-Type: dev.chainguard.api.iam.group.updated.v1
 Content-Length: 169
 Content-Type: application/json
@@ -719,7 +719,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/groups
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the record
-Ce-Time: 2023-12-12T01:57:15.370677128Z
+Ce-Time: 2023-12-19T19:01:24.261119369Z
 Ce-Type: dev.chainguard.api.iam.group.deleted.v1
 Content-Length: 92
 Content-Type: application/json
@@ -755,7 +755,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/identities
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of identity
-Ce-Time: 2023-12-12T01:57:15.369970429Z
+Ce-Time: 2023-12-19T19:01:24.271188332Z
 Ce-Type: dev.chainguard.api.iam.identity.created.v1
 Content-Length: 329
 Content-Type: application/json
@@ -796,7 +796,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/identities
 Ce-Specversion: 1.0
 Ce-Subject: The unique identifier of this specific identity
-Ce-Time: 2023-12-12T01:57:15.370112729Z
+Ce-Time: 2023-12-19T19:01:24.271446333Z
 Ce-Type: dev.chainguard.api.iam.identity.updated.v1
 Content-Length: 245
 Content-Type: application/json
@@ -834,7 +834,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/identities
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the record
-Ce-Time: 2023-12-12T01:57:15.370239629Z
+Ce-Time: 2023-12-19T19:01:24.271635834Z
 Ce-Type: dev.chainguard.api.iam.identity.deleted.v1
 Content-Length: 92
 Content-Type: application/json
@@ -870,7 +870,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/identityProviders
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of identity provider
-Ce-Time: 2023-12-12T01:57:15.36914053Z
+Ce-Time: 2023-12-19T19:01:24.276460764Z
 Ce-Type: dev.chainguard.api.iam.identity_providers.created.v1
 Content-Length: 378
 Content-Type: application/json
@@ -911,7 +911,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/identityProviders
 Ce-Specversion: 1.0
 Ce-Subject: The UIDP of the IAM group to nest this identity provider under
-Ce-Time: 2023-12-12T01:57:15.36929803Z
+Ce-Time: 2023-12-19T19:01:24.277602771Z
 Ce-Type: dev.chainguard.api.iam.identity_providers.updated.v1
 Content-Length: 279
 Content-Type: application/json
@@ -949,7 +949,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/identityProviders
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the IdP
-Ce-Time: 2023-12-12T01:57:15.36942153Z
+Ce-Time: 2023-12-19T19:01:24.277915973Z
 Ce-Type: dev.chainguard.api.iam.identity_providers.deleted.v1
 Content-Length: 89
 Content-Type: application/json
@@ -985,7 +985,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/policies
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of policy
-Ce-Time: 2023-12-12T01:57:15.367417932Z
+Ce-Time: 2023-12-19T19:01:24.271862836Z
 Ce-Type: dev.chainguard.api.iam.policy.created.v1
 Content-Length: 286
 Content-Type: application/json
@@ -1026,7 +1026,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/policies
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the policy
-Ce-Time: 2023-12-12T01:57:15.367745032Z
+Ce-Time: 2023-12-19T19:01:24.272120537Z
 Ce-Type: dev.chainguard.api.iam.policy.deleted.v1
 Content-Length: 92
 Content-Type: application/json
@@ -1061,7 +1061,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/policies
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the policy
-Ce-Time: 2023-12-12T01:57:15.367889231Z
+Ce-Time: 2023-12-19T19:01:24.273423446Z
 Ce-Type: dev.chainguard.api.iam.policy.updated.v1
 Content-Length: 204
 Content-Type: application/json
@@ -1099,7 +1099,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/policyVersions
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the policy version
-Ce-Time: 2023-12-12T01:57:15.368015731Z
+Ce-Time: 2023-12-19T19:01:24.273693647Z
 Ce-Type: dev.chainguard.api.iam.policy.version.activated.v1
 Content-Length: 108
 Content-Type: application/json
@@ -1135,7 +1135,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/rolebindings
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the Role to bind
-Ce-Time: 2023-12-12T01:57:15.368213031Z
+Ce-Time: 2023-12-19T19:01:24.274268651Z
 Ce-Type: dev.chainguard.api.iam.rolebindings.created.v1
 Content-Length: 261
 Content-Type: application/json
@@ -1175,7 +1175,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/rolebindings
 Ce-Specversion: 1.0
 Ce-Subject: UID of this role binding
-Ce-Time: 2023-12-12T01:57:15.368368731Z
+Ce-Time: 2023-12-19T19:01:24.275375058Z
 Ce-Type: dev.chainguard.api.iam.rolebindings.updated.v1
 Content-Length: 173
 Content-Type: application/json
@@ -1212,7 +1212,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/iam/v1/rolebindings
 Ce-Specversion: 1.0
 Ce-Subject: UID of the record
-Ce-Time: 2023-12-12T01:57:15.368506831Z
+Ce-Time: 2023-12-19T19:01:24.276007062Z
 Ce-Type: dev.chainguard.api.iam.rolebindings.deleted.v1
 Content-Length: 91
 Content-Type: application/json
@@ -1248,7 +1248,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/registry/v1/repos
 Ce-Specversion: 1.0
 Ce-Subject: The identifier of this specific repository
-Ce-Time: 2023-12-12T01:57:15.371301027Z
+Ce-Time: 2023-12-19T19:01:24.267993812Z
 Ce-Type: dev.chainguard.api.platform.registry.repo.created.v1
 Content-Length: 179
 Content-Type: application/json
@@ -1284,7 +1284,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/registry/v1/repos
 Ce-Specversion: 1.0
 Ce-Subject: The identifier of this specific repository
-Ce-Time: 2023-12-12T01:57:15.371459227Z
+Ce-Time: 2023-12-19T19:01:24.268387014Z
 Ce-Type: dev.chainguard.api.platform.registry.repo.updated.v1
 Content-Length: 179
 Content-Type: application/json
@@ -1320,7 +1320,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/registry/v1/repos
 Ce-Specversion: 1.0
 Ce-Subject: The identifier of this specific repository
-Ce-Time: 2023-12-12T01:57:15.371577727Z
+Ce-Time: 2023-12-19T19:01:24.268608116Z
 Ce-Type: dev.chainguard.api.platform.registry.repo.deleted.v1
 Content-Length: 116
 Content-Type: application/json
@@ -1355,7 +1355,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/registry/v1/tags
 Ce-Specversion: 1.0
 Ce-Subject: The identifier of this specific tag
-Ce-Time: 2023-12-12T01:57:15.371674027Z
+Ce-Time: 2023-12-19T19:01:24.268998918Z
 Ce-Type: dev.chainguard.api.platform.registry.tag.created.v1
 Content-Length: 197
 Content-Type: application/json
@@ -1392,7 +1392,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/registry/v1/tags
 Ce-Specversion: 1.0
 Ce-Subject: The identifier of this specific tag
-Ce-Time: 2023-12-12T01:57:15.371806827Z
+Ce-Time: 2023-12-19T19:01:24.26929322Z
 Ce-Type: dev.chainguard.api.platform.registry.tag.updated.v1
 Content-Length: 197
 Content-Type: application/json
@@ -1429,7 +1429,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/registry/v1/tags
 Ce-Specversion: 1.0
 Ce-Subject: The identifier of this specific tag
-Ce-Time: 2023-12-12T01:57:15.371914326Z
+Ce-Time: 2023-12-19T19:01:24.269553121Z
 Ce-Type: dev.chainguard.api.platform.registry.tag.deleted.v1
 Content-Length: 109
 Content-Type: application/json
@@ -1465,7 +1465,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/tenant/v1/clusters
 Ce-Specversion: 1.0
 Ce-Subject: Cluster UIDP under which this cluster resides
-Ce-Time: 2023-12-12T01:57:15.372199526Z
+Ce-Time: 2023-12-19T19:01:24.266010199Z
 Ce-Type: dev.chainguard.api.tenant.cluster.created.v1
 Content-Length: 1735
 Content-Type: application/json
@@ -1486,8 +1486,8 @@ User-Agent: Chainguard Enforce
         "example activity": {
           "controller_name": "the name of the Controller CRD which was the source of this activity on the tenant cluster",
           "last_seen": {
-            "nanos": 363960036,
-            "seconds": 1702346235
+            "nanos": 250404702,
+            "seconds": 1703012484
           },
           "namespace": "the namespace in which the source of this cluster activity lives",
           "spec_hash": "the hash of the Controller or Webhook CRD's spec",
@@ -1512,14 +1512,14 @@ User-Agent: Chainguard Enforce
       },
       "issuer": "the identity issuer tied to this cluster",
       "last_seen": {
-        "nanos": 363959836,
-        "seconds": 1702346235
+        "nanos": 250404102,
+        "seconds": 1703012484
       },
       "managed_name": "unique name assigned to this cluster's managed agent",
       "name": "name of the cluster",
       "registered": {
-        "nanos": 363952336,
-        "seconds": 1702346235
+        "nanos": 250394702,
+        "seconds": 1703012484
       },
       "remote_id": "the remote ID of this cluster",
       "status": {
@@ -1547,7 +1547,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/tenant/v1/clusters
 Ce-Specversion: 1.0
 Ce-Subject: UIDP of the record
-Ce-Time: 2023-12-12T01:57:15.372519526Z
+Ce-Time: 2023-12-19T19:01:24.266702404Z
 Ce-Type: dev.chainguard.api.tenant.cluster.deleted.v1
 Content-Length: 92
 Content-Type: application/json
@@ -1582,7 +1582,7 @@ Ce-Id: cloudevent generated UUID
 Ce-Source: https://console-api.enforce.dev/tenant/v1/clusters
 Ce-Specversion: 1.0
 Ce-Subject: Cluster UIDP under which this cluster resides
-Ce-Time: 2023-12-12T01:57:15.372632626Z
+Ce-Time: 2023-12-19T19:01:24.267244607Z
 Ce-Type: dev.chainguard.api.tenant.cluster.updated.v1
 Content-Length: 1663
 Content-Type: application/json
@@ -1602,8 +1602,8 @@ User-Agent: Chainguard Enforce
       "example activity": {
         "controller_name": "the name of the Controller CRD which was the source of this activity on the tenant cluster",
         "last_seen": {
-          "nanos": 363961236,
-          "seconds": 1702346235
+          "nanos": 250405902,
+          "seconds": 1703012484
         },
         "namespace": "the namespace in which the source of this cluster activity lives",
         "spec_hash": "the hash of the Controller or Webhook CRD's spec",
@@ -1628,14 +1628,14 @@ User-Agent: Chainguard Enforce
     },
     "issuer": "the identity issuer tied to this cluster",
     "last_seen": {
-      "nanos": 363961036,
-      "seconds": 1702346235
+      "nanos": 250405702,
+      "seconds": 1703012484
     },
     "managed_name": "unique name assigned to this cluster's managed agent",
     "name": "name of the cluster",
     "registered": {
-      "nanos": 363960936,
-      "seconds": 1702346235
+      "nanos": 250405602,
+      "seconds": 1703012484
     },
     "remote_id": "the remote ID of this cluster",
     "status": {
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl.md b/content/chainguard/chainctl/chainctl-docs/chainctl.md
index 68ad99a42b..76a8fb4fac 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl"
 slug: chainctl
 url: /chainguard/chainctl/chainctl-docs/chainctl/
@@ -22,7 +22,7 @@ chainctl [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
   -h, --help                         help for chainctl
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_auth.md b/content/chainguard/chainctl/chainctl-docs/chainctl_auth.md
index 59906c3aac..764bbdc7c3 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_auth.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_auth.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl auth"
 slug: chainctl_auth
 url: /chainguard/chainctl/chainctl-docs/chainctl_auth/
@@ -24,7 +24,7 @@ Auth related commands for the Chainguard platform.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_auth_configure-docker.md b/content/chainguard/chainctl/chainctl-docs/chainctl_auth_configure-docker.md
index 9115680b60..f15013f6aa 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_auth_configure-docker.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_auth_configure-docker.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl auth configure-docker"
 slug: chainctl_auth_configure-docker
 url: /chainguard/chainctl/chainctl-docs/chainctl_auth_configure-docker/
@@ -37,7 +37,7 @@ chainctl auth configure-docker [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_auth_login.md b/content/chainguard/chainctl/chainctl-docs/chainctl_auth_login.md
index 6a57daa206..2e8ba212a1 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_auth_login.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_auth_login.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl auth login"
 slug: chainctl_auth_login
 url: /chainguard/chainctl/chainctl-docs/chainctl_auth_login/
@@ -56,7 +56,7 @@ chainctl auth login [--invite-code=INVITE_CODE | --register] [--identity-token=P
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_auth_logout.md b/content/chainguard/chainctl/chainctl-docs/chainctl_auth_logout.md
index 4ca03ecdd5..6cdc600272 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_auth_logout.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_auth_logout.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl auth logout"
 slug: chainctl_auth_logout
 url: /chainguard/chainctl/chainctl-docs/chainctl_auth_logout/
@@ -28,7 +28,7 @@ chainctl auth logout [--audience=AUDIENCE]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_auth_status.md b/content/chainguard/chainctl/chainctl-docs/chainctl_auth_status.md
index c483ffe0fa..2da756be7a 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_auth_status.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_auth_status.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl auth status"
 slug: chainctl_auth_status
 url: /chainguard/chainctl/chainctl-docs/chainctl_auth_status/
@@ -30,7 +30,7 @@ chainctl auth status [--output table|json|terse] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters.md
index 55af42eebf..e149e75861 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters"
 slug: chainctl_clusters
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters/
@@ -24,7 +24,7 @@ Cluster related commands for the Chainguard platform.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_cidrs.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_cidrs.md
index fb49569671..d9324ea072 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_cidrs.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_cidrs.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters cidrs"
 slug: chainctl_clusters_cidrs
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_cidrs/
@@ -24,7 +24,7 @@ Enforce Egress CIDR related commands.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_cidrs_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_cidrs_list.md
index 5a25d2d28d..ff101a6a31 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_cidrs_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_cidrs_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters cidrs list"
 slug: chainctl_clusters_cidrs_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_cidrs_list/
@@ -28,7 +28,7 @@ chainctl clusters cidrs list [--output json]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_describe.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_describe.md
index a8c63e1e30..dd8a9a0d68 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_describe.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_describe.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters describe"
 slug: chainctl_clusters_describe
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_describe/
@@ -52,7 +52,7 @@ chainctl clusters describe [CLUSTER_NAME | CLUSTER_ID] [--active-within DURATION
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_discover.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_discover.md
index e80a4bdd2f..b4a5d66ef7 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_discover.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_discover.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters discover"
 slug: chainctl_clusters_discover
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_discover/
@@ -43,7 +43,7 @@ chainctl clusters discover --provider=PROVIDER1,PROVIDER2,... [--states=STATE1,S
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_install.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_install.md
index fd122e30a5..f334ceaf86 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_install.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_install.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters install"
 slug: chainctl_clusters_install
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_install/
@@ -67,7 +67,7 @@ chainctl clusters install [--name NAME] [--description DESCRIPTION] [--group GRO
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_list.md
index 0ad26b0193..107770976a 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters list"
 slug: chainctl_clusters_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_list/
@@ -44,7 +44,7 @@ chainctl clusters list [--name=NAME] [--active-within=DURATION] [--group=GROUP_N
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_open.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_open.md
index da6e2b5e7f..44fe1ba99d 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_open.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_open.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters open"
 slug: chainctl_clusters_open
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_open/
@@ -28,7 +28,7 @@ chainctl clusters open CLUSTER_NAME|CLUSTER_ID [--output table|json]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_print-config.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_print-config.md
index 8f23b9b0c4..24ec550db6 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_print-config.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_print-config.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters print-config"
 slug: chainctl_clusters_print-config
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_print-config/
@@ -30,7 +30,7 @@ chainctl clusters print-config [--profiles=PROFILE1,PROFILE2,...] [--opt=KEY=VAL
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_profiles.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_profiles.md
index df34937087..df9fe371b0 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_profiles.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_profiles.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters profiles"
 slug: chainctl_clusters_profiles
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_profiles/
@@ -24,7 +24,7 @@ Profile related commands.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_profiles_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_profiles_list.md
index 3813325eda..2f5d5e906b 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_profiles_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_profiles_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters profiles list"
 slug: chainctl_clusters_profiles_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_profiles_list/
@@ -28,7 +28,7 @@ chainctl clusters profiles list [--output table|json|wide]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records.md
index cec8a6a4fb..38b5cb4670 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters records"
 slug: chainctl_clusters_records
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_records/
@@ -24,7 +24,7 @@ Interact with cluster records.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_list.md
index a0b51b23b8..addcb4465f 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters records list"
 slug: chainctl_clusters_records_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_records_list/
@@ -30,7 +30,7 @@ chainctl clusters records list [CLUSTER_NAME | CLUSTER_ID] [--active-within DURA
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns.md
index b7b205c7dd..e660c8916b 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters records vulns"
 slug: chainctl_clusters_records_vulns
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns/
@@ -24,7 +24,7 @@ Interact with cluster records vulnerabilities.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns_describe.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns_describe.md
index b7e893062a..5a6d4eb5bc 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns_describe.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns_describe.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters records vulns describe"
 slug: chainctl_clusters_records_vulns_describe
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns_describe/
@@ -33,7 +33,7 @@ chainctl clusters records vulns describe CLUSTER_NAME|CLUSTER_ID --image=IMAGE [
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns_list.md
index b2929422e4..abc23a9dc0 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters records vulns list"
 slug: chainctl_clusters_records_vulns_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_records_vulns_list/
@@ -33,7 +33,7 @@ chainctl clusters records vulns list CLUSTER_NAME|CLUSTER_ID [--image=IMAGE] [--
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_search.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_search.md
index af08a528a5..e2ccc48dde 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_search.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_search.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters search"
 slug: chainctl_clusters_search
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_search/
@@ -43,7 +43,7 @@ chainctl clusters search [CLUSTER_NAME | CLUSTER_ID | GROUP_NAME | GROUP_ID ] [-
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_uninstall.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_uninstall.md
index 6aa066fd68..3006e95c2c 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_uninstall.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_uninstall.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters uninstall"
 slug: chainctl_clusters_uninstall
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_uninstall/
@@ -53,7 +53,7 @@ chainctl clusters uninstall [--group={GROUP_NAME|GROUP_ID}] [--context=CONTEXT_N
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_update.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_update.md
index 161e5a357f..a6df30612e 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_update.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_update.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters update"
 slug: chainctl_clusters_update
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_update/
@@ -48,7 +48,7 @@ chainctl clusters update CLUSTER_NAME|CLUSTER_ID [--name NAME] [--description DE
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_workloads.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_workloads.md
index 1f087b4c22..238a31101b 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_workloads.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_workloads.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters workloads"
 slug: chainctl_clusters_workloads
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_workloads/
@@ -24,7 +24,7 @@ Interact with cluster workloads.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_workloads_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_workloads_list.md
index 9f778464da..d741999337 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_workloads_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_clusters_workloads_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl clusters workloads list"
 slug: chainctl_clusters_workloads_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_clusters_workloads_list/
@@ -30,7 +30,7 @@ chainctl clusters workloads list CLUSTER_NAME|CLUSTER_ID [--active-within=DURATI
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_config.md b/content/chainguard/chainctl/chainctl-docs/chainctl_config.md
index b2ce19c988..226cb5201d 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_config.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_config.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl config"
 slug: chainctl_config
 url: /chainguard/chainctl/chainctl-docs/chainctl_config/
@@ -24,7 +24,7 @@ Local config file commands for chainctl.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_config_edit.md b/content/chainguard/chainctl/chainctl-docs/chainctl_config_edit.md
index 95500167a3..bba45e9797 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_config_edit.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_config_edit.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl config edit"
 slug: chainctl_config_edit
 url: /chainguard/chainctl/chainctl-docs/chainctl_config_edit/
@@ -33,7 +33,7 @@ chainctl config edit [--config FILE] [--yes] [--output ] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_config_reset.md b/content/chainguard/chainctl/chainctl-docs/chainctl_config_reset.md
index b125bd21ea..f301e98ffb 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_config_reset.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_config_reset.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl config reset"
 slug: chainctl_config_reset
 url: /chainguard/chainctl/chainctl-docs/chainctl_config_reset/
@@ -29,7 +29,7 @@ chainctl config reset [--yes]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_config_save.md b/content/chainguard/chainctl/chainctl-docs/chainctl_config_save.md
index 8702475476..97c7e48182 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_config_save.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_config_save.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl config save"
 slug: chainctl_config_save
 url: /chainguard/chainctl/chainctl-docs/chainctl_config_save/
@@ -29,7 +29,7 @@ chainctl config save [--config FILE] [--yes] [--output ] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_config_set.md b/content/chainguard/chainctl/chainctl-docs/chainctl_config_set.md
index 4158b7ba06..42cf7ef75c 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_config_set.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_config_set.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl config set"
 slug: chainctl_config_set
 url: /chainguard/chainctl/chainctl-docs/chainctl_config_set/
@@ -39,7 +39,7 @@ chainctl config set PROPERTY_NAME PROPERTY_VALUE
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_config_unset.md b/content/chainguard/chainctl/chainctl-docs/chainctl_config_unset.md
index 9655ccd4d6..3e6cceb6b1 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_config_unset.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_config_unset.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl config unset"
 slug: chainctl_config_unset
 url: /chainguard/chainctl/chainctl-docs/chainctl_config_unset/
@@ -39,7 +39,7 @@ chainctl config unset PROPERTY_NAME
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_config_validate.md b/content/chainguard/chainctl/chainctl-docs/chainctl_config_validate.md
index 47ec3b8949..56b9a5ea3b 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_config_validate.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_config_validate.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl config validate"
 slug: chainctl_config_validate
 url: /chainguard/chainctl/chainctl-docs/chainctl_config_validate/
@@ -28,7 +28,7 @@ chainctl config validate [--output table|json] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_config_view.md b/content/chainguard/chainctl/chainctl-docs/chainctl_config_view.md
index 7226c5660e..fc0c3c104b 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_config_view.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_config_view.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl config view"
 slug: chainctl_config_view
 url: /chainguard/chainctl/chainctl-docs/chainctl_config_view/
@@ -29,7 +29,7 @@ chainctl config view [--diff] [--output ] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_events.md b/content/chainguard/chainctl/chainctl-docs/chainctl_events.md
index 04592fc620..e6f53f1631 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_events.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_events.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl events"
 slug: chainctl_events
 url: /chainguard/chainctl/chainctl-docs/chainctl_events/
@@ -24,7 +24,7 @@ Events related commands for the Chainguard platform.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions.md b/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions.md
index ac0673dd76..b8ff34310e 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl events subscriptions"
 slug: chainctl_events_subscriptions
 url: /chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions/
@@ -24,7 +24,7 @@ Subscription interactions.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_create.md b/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_create.md
index 7988384978..b1e7134eba 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_create.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_create.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl events subscriptions create"
 slug: chainctl_events_subscriptions_create
 url: /chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_create/
@@ -30,7 +30,7 @@ chainctl events subscriptions create SINK_URL [--group GROUP_NAME | GROUP_ID] [-
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_delete.md b/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_delete.md
index e795ad4833..94cbd2f85f 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_delete.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_delete.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl events subscriptions delete"
 slug: chainctl_events_subscriptions_delete
 url: /chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_delete/
@@ -29,7 +29,7 @@ chainctl events subscriptions delete SUBSCRIPTION_ID [--yes] [--output id] [flag
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_list.md
index 7aeebadee3..fb51713148 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl events subscriptions list"
 slug: chainctl_events_subscriptions_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_events_subscriptions_list/
@@ -29,7 +29,7 @@ chainctl events subscriptions list [--group GROUP_NAME | GROUP_ID] [--output tab
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam.md
index 1eb7b848b6..a60c591597 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam"
 slug: chainctl_iam
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam/
@@ -24,7 +24,7 @@ IAM related commands for the Chainguard platform.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations.md
index 6f59c0ad8c..c2794870c5 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations"
 slug: chainctl_iam_account-associations
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations/
@@ -24,7 +24,7 @@ Configure and manage cloud provider account associations.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check.md
index e8187d4f6f..4a32c01b1b 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations check"
 slug: chainctl_iam_account-associations_check
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check/
@@ -24,7 +24,7 @@ Check the OIDC federation configurations for cloud providers.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check_aws.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check_aws.md
index 52a179a278..98fe2549a6 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check_aws.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check_aws.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations check aws"
 slug: chainctl_iam_account-associations_check_aws
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check_aws/
@@ -28,7 +28,7 @@ chainctl iam account-associations check aws GROUP_NAME|GROUP_ID [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check_gcp.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check_gcp.md
index 2eaa95ac4c..36c5a9458e 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check_gcp.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check_gcp.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations check gcp"
 slug: chainctl_iam_account-associations_check_gcp
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_check_gcp/
@@ -28,7 +28,7 @@ chainctl iam account-associations check gcp GROUP_NAME|GROUP_ID [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_describe.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_describe.md
index 134bd9a5af..d8757253d3 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_describe.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_describe.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations describe"
 slug: chainctl_iam_account-associations_describe
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_describe/
@@ -31,7 +31,7 @@ chainctl iam account-associations describe GROUP_NAME|GROUP_ID [--aws] [--gcp] [
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set.md
index d878407167..743959de41 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations set"
 slug: chainctl_iam_account-associations_set
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set/
@@ -24,7 +24,7 @@ Set cloud provider account associations for a group.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set_aws.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set_aws.md
index bd44552ff9..ed85ef3c59 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set_aws.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set_aws.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations set aws"
 slug: chainctl_iam_account-associations_set_aws
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set_aws/
@@ -32,7 +32,7 @@ chainctl iam account-associations set aws GROUP_NAME|GROUP_ID --account=ACCOUNT
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set_gcp.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set_gcp.md
index 6cefcd7b50..bf38d25d87 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set_gcp.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set_gcp.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations set gcp"
 slug: chainctl_iam_account-associations_set_gcp
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_set_gcp/
@@ -33,7 +33,7 @@ chainctl iam account-associations set gcp GROUP_NAME|GROUP_ID --project-id=PROJE
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset.md
index c367897eb3..13e2c4cef4 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations unset"
 slug: chainctl_iam_account-associations_unset
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset/
@@ -24,7 +24,7 @@ Remove cloud provider account associations from a group.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset_aws.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset_aws.md
index bec9cf0ada..1d2eb95349 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset_aws.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset_aws.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations unset aws"
 slug: chainctl_iam_account-associations_unset_aws
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset_aws/
@@ -29,7 +29,7 @@ chainctl iam account-associations unset aws GROUP_NAME|GROUP_ID [--yes] [--outpu
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset_gcp.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset_gcp.md
index ccf70364a3..34ee327d74 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset_gcp.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset_gcp.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam account-associations unset gcp"
 slug: chainctl_iam_account-associations_unset_gcp
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_account-associations_unset_gcp/
@@ -29,7 +29,7 @@ chainctl iam account-associations unset gcp GROUP_NAME|GROUP_ID [--yes] [--outpu
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups.md
index ca2fded9cb..9fe3407812 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam groups"
 slug: chainctl_iam_groups
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_groups/
@@ -24,7 +24,7 @@ IAM Group resource interactions.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_create.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_create.md
index f99c75606a..dd01538a10 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_create.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_create.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam groups create"
 slug: chainctl_iam_groups_create
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_groups_create/
@@ -33,7 +33,7 @@ chainctl iam groups create GROUP_NAME [--parent GROUP_NAME | GROUP_ID | --no-par
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_delete.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_delete.md
index 1b50ce9e8e..7bfe98bc77 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_delete.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_delete.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam groups delete"
 slug: chainctl_iam_groups_delete
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_groups_delete/
@@ -45,7 +45,7 @@ chainctl iam group delete
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_describe.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_describe.md
index c178653e64..6fcb21fa2a 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_describe.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_describe.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam groups describe"
 slug: chainctl_iam_groups_describe
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_groups_describe/
@@ -29,7 +29,7 @@ chainctl iam groups describe [--active-within DURATION] [--output json] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_list.md
index 38a8bb0ced..686b234acb 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam groups list"
 slug: chainctl_iam_groups_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_groups_list/
@@ -39,7 +39,7 @@ chainctl iam groups list [--group=GROUP_NAME|GROUP_ID] [--output tree|table|json
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_update.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_update.md
index d4042fa340..8974724308 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_update.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_groups_update.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam groups update"
 slug: chainctl_iam_groups_update
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_groups_update/
@@ -44,7 +44,7 @@ chainctl iam groups update my-group --description ""
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities.md
index 2ad36a7631..ec132db498 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identities"
 slug: chainctl_iam_identities
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identities/
@@ -24,7 +24,7 @@ Identity management.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create.md
index fd504ddbcd..0b594462c6 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identities create"
 slug: chainctl_iam_identities_create
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create/
@@ -59,7 +59,7 @@ chainctl iam identities create NAME {--filename FILE | {--identity-issuer=ISS |
 
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create_github.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create_github.md
index a690c8d2da..d1ee17aa7c 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create_github.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create_github.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identities create github"
 slug: chainctl_iam_identities_create_github
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create_github/
@@ -46,7 +46,7 @@ chainctl iam identities create github NAME --github-repo=REPO [--github-ref=REF]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create_gitlab.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create_gitlab.md
index 97f737f87d..0cd7eb8529 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create_gitlab.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create_gitlab.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identities create gitlab"
 slug: chainctl_iam_identities_create_gitlab
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identities_create_gitlab/
@@ -46,7 +46,7 @@ chainctl iam identities create gitlab NAME --project-path=GITLAB-GROUP/GITLAB-PR
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_delete.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_delete.md
index bc9a4ebf62..bd425bfdce 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_delete.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_delete.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identities delete"
 slug: chainctl_iam_identities_delete
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identities_delete/
@@ -41,7 +41,7 @@ chainctl iam identities delete {IDENTITY_NAME | IDENTITY_ID | --expired [--group
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_describe.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_describe.md
index e1d6dd83f8..5fe049a54c 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_describe.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_describe.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identities describe"
 slug: chainctl_iam_identities_describe
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identities_describe/
@@ -28,7 +28,7 @@ chainctl iam identities describe {IDENTITY_NAME | IDENTITY_ID} [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_list.md
index c249c116a6..ac32bfc14b 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identities list"
 slug: chainctl_iam_identities_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identities_list/
@@ -48,7 +48,7 @@ chainctl iam identities list [--group=GROUP_NAME|GROUP_ID] [--name=NAME] [--rela
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_update.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_update.md
index 38c9b9cb00..db8a1a78ac 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_update.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identities_update.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identities update"
 slug: chainctl_iam_identities_update
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identities_update/
@@ -48,7 +48,7 @@ chainctl iam identities update IDENTITY_NAME | IDENTITY_ID [--description=DESC]
 
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers.md
index 69d3e0a5ff..728c5afd88 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identity-providers"
 slug: chainctl_iam_identity-providers
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers/
@@ -24,7 +24,7 @@ customer managed identity provider management
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_create.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_create.md
index daa5d62fa8..26b8fd0da3 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_create.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_create.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identity-providers create"
 slug: chainctl_iam_identity-providers_create
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_create/
@@ -49,7 +49,7 @@ chainctl iam identity-providers create --group=GROUP [--name=NAME] [--descriptio
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_delete.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_delete.md
index 51803105c8..f51c6a715b 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_delete.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_delete.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identity-providers delete"
 slug: chainctl_iam_identity-providers_delete
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_delete/
@@ -39,7 +39,7 @@ chainctl iam identity-providers delete IDENTITY_PROVIDER_ID|IDENTITY_PROVIDER_NA
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_list.md
index 7d3e520d73..1c8a1aaf71 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identity-providers list"
 slug: chainctl_iam_identity-providers_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_list/
@@ -39,7 +39,7 @@ chainctl iam identity-providers list --group=GROUP_NAME|GROUP_ID [--output table
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_update.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_update.md
index f7d6ea1b0d..ee3cac8c34 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_update.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_update.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam identity-providers update"
 slug: chainctl_iam_identity-providers_update
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_identity-providers_update/
@@ -47,7 +47,7 @@ chainctl iam identity-providers update IDENTITY_PROVIDER_ID [--name=NAME] [--des
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites.md
index a23f2e849a..28ef76a41a 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam invites"
 slug: chainctl_iam_invites
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_invites/
@@ -24,7 +24,7 @@ Manage invite codes that register identities or clusters with Chainguard.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_create.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_create.md
index 0cf1d8e37b..7871b59ce3 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_create.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_create.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam invites create"
 slug: chainctl_iam_invites_create
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_invites_create/
@@ -47,7 +47,7 @@ chainctl iam invite create GROUP_ID --cluster
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_delete.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_delete.md
index f5e2ebf29f..d759b7ead8 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_delete.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_delete.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam invites delete"
 slug: chainctl_iam_invites_delete
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_invites_delete/
@@ -30,7 +30,7 @@ chainctl iam invites delete {INVITE_ID... | --expired} [--yes] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_list.md
index fd3e8ed0bc..515c2a1c71 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_invites_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam invites list"
 slug: chainctl_iam_invites_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_invites_list/
@@ -39,7 +39,7 @@ chainctl iam invites list --group=GROUP_NAME|GROUP_ID [--output table|json|id]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings.md
index 8c5f100d58..eda2bf0f0d 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam role-bindings"
 slug: chainctl_iam_role-bindings
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings/
@@ -24,7 +24,7 @@ IAM role-bindings resource interactions.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_create.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_create.md
index 3edcd7370e..4b3fc849c9 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_create.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_create.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam role-bindings create"
 slug: chainctl_iam_role-bindings_create
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_create/
@@ -42,7 +42,7 @@ chainctl iam role-bindings create [--identity=IDENTITY] [--role=ROLE] [--group=G
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_delete.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_delete.md
index 0e2fb94f7f..3c5f01dcda 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_delete.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_delete.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam role-bindings delete"
 slug: chainctl_iam_role-bindings_delete
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_delete/
@@ -36,7 +36,7 @@ chainctl iam role-bindings delete ROLE_BINDING_ID [--yes] [--output id]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_list.md
index 2dac4bc790..7df2da414b 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam role-bindings list"
 slug: chainctl_iam_role-bindings_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_list/
@@ -39,7 +39,7 @@ chainctl iam role-bindings list --group=GROUP_NAME|GROUP_ID [--output table|tree
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_update.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_update.md
index d990c599ba..65d9c46567 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_update.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_update.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam role-bindings update"
 slug: chainctl_iam_role-bindings_update
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_role-bindings_update/
@@ -41,7 +41,7 @@ chainctl iam role-bindings update BINDING_ID [--role=ROLE] [--identity=IDENTITY]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles.md
index 91807d9e84..67fb7aab71 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam roles"
 slug: chainctl_iam_roles
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_roles/
@@ -24,7 +24,7 @@ IAM role resource interactions.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_capabilities.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_capabilities.md
index 267ddccae3..61fabcf3f4 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_capabilities.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_capabilities.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam roles capabilities"
 slug: chainctl_iam_roles_capabilities
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_roles_capabilities/
@@ -24,7 +24,7 @@ IAM role capabilities
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_capabilities_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_capabilities_list.md
index 02fcc10aae..18fbdc0395 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_capabilities_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_capabilities_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam roles capabilities list"
 slug: chainctl_iam_roles_capabilities_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_roles_capabilities_list/
@@ -43,7 +43,7 @@ chainctl iam roles capabilities list [--actions=ACTION,...] [--resources=RESOURC
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_create.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_create.md
index f3e57358f9..9dd90e9aaa 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_create.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_create.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam roles create"
 slug: chainctl_iam_roles_create
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_roles_create/
@@ -42,7 +42,7 @@ chainctl iam roles create ROLE_NAME --group=GROUP_NAME|GROUP_ID --capabilities=C
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_delete.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_delete.md
index 9ba74732fb..65fa4a5308 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_delete.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_delete.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam roles delete"
 slug: chainctl_iam_roles_delete
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_roles_delete/
@@ -36,7 +36,7 @@ chainctl iam roles delete ROLE_NAME|ROLE_ID [--yes] [--output table|json|id]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_list.md
index e982ff0022..26c184bc73 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam roles list"
 slug: chainctl_iam_roles_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_roles_list/
@@ -45,7 +45,7 @@ chainctl iam roles list [--name=NAME] [--capabilities=CAPABILITY,...] [--group=G
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_update.md b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_update.md
index 03cb40be2c..83a407ed82 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_update.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_iam_roles_update.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl iam roles update"
 slug: chainctl_iam_roles_update
 url: /chainguard/chainctl/chainctl-docs/chainctl_iam_roles_update/
@@ -49,7 +49,7 @@ chainctl iam roles update ROLE_NAME|ROLE_ID [--capabilities=CAPABILITY,...] [--a
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_images.md b/content/chainguard/chainctl/chainctl-docs/chainctl_images.md
index 8d56e22cdd..e28d8d863d 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_images.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_images.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl images"
 slug: chainctl_images
 url: /chainguard/chainctl/chainctl-docs/chainctl_images/
@@ -24,7 +24,7 @@ Images related commands for the Chainguard platform.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_images_diff.md b/content/chainguard/chainctl/chainctl-docs/chainctl_images_diff.md
index 8d75a64755..f865e97c6d 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_images_diff.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_images_diff.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl images diff"
 slug: chainctl_images_diff
 url: /chainguard/chainctl/chainctl-docs/chainctl_images_diff/
@@ -29,7 +29,7 @@ chainctl images diff FROM_IMAGE TO_IMAGE [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_images_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_images_list.md
index 5e0265cdcf..3fb8847708 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_images_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_images_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl images list"
 slug: chainctl_images_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_images_list/
@@ -32,7 +32,7 @@ chainctl images list [--group GROUP_NAME | GROUP_ID] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_images_repos.md b/content/chainguard/chainctl/chainctl-docs/chainctl_images_repos.md
index e8d32a85c7..5c9f5d98e4 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_images_repos.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_images_repos.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl images repos"
 slug: chainctl_images_repos
 url: /chainguard/chainctl/chainctl-docs/chainctl_images_repos/
@@ -24,7 +24,7 @@ Image repo related commands for the Chainguard platform.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_images_repos_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_images_repos_list.md
index c8dcb0a5ac..8607f2f23e 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_images_repos_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_images_repos_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl images repos list"
 slug: chainctl_images_repos_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_images_repos_list/
@@ -32,7 +32,7 @@ chainctl images repos list [--group GROUP_NAME | GROUP_ID] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies.md
index 4e7e668d5d..1e5d5321c9 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies"
 slug: chainctl_policies
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies/
@@ -24,7 +24,7 @@ Policy related commands for the Chainguard platform.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_apply.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_apply.md
index 4ee2ee2ea6..a0a2e66ca1 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_apply.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_apply.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies apply"
 slug: chainctl_policies_apply
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_apply/
@@ -46,7 +46,7 @@ chainctl policies apply [--group=GROUP_NAME | GROUP_ID] [--description=DESCRIPTI
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_delete.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_delete.md
index 43005a0a47..dd36f504f9 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_delete.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_delete.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies delete"
 slug: chainctl_policies_delete
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_delete/
@@ -50,7 +50,7 @@ chainctl policies delete [POLICY,... | --group=GROUP [--recursive]] [--yes] [--o
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_edit.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_edit.md
index 575e139e91..57bb3b9642 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_edit.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_edit.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies edit"
 slug: chainctl_policies_edit
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_edit/
@@ -39,7 +39,7 @@ chainctl policies edit [POLICY_NAME | POLICY_ID] [--yes] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_list.md
index 0f56c6ba6d..3a4294bff4 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies list"
 slug: chainctl_policies_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_list/
@@ -41,7 +41,7 @@ chainctl policies list [--group=GROUP_NAME | GROUP_ID] [--image=IMAGE] [--output
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_update.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_update.md
index ce0fdf81e9..a9ca6f139c 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_update.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_update.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies update"
 slug: chainctl_policies_update
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_update/
@@ -39,7 +39,7 @@ chainctl policies update POLICY_NAME | POLICY_ID [--description=DESCRIPTION] [--
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions.md
index 8d6ddc3dd1..af814925e1 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies versions"
 slug: chainctl_policies_versions
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_versions/
@@ -24,7 +24,7 @@ Commands for interacting with policy versions on the Chainguard platform.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_activate.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_activate.md
index 955f2f279f..79e3589f8d 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_activate.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_activate.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies versions activate"
 slug: chainctl_policies_versions_activate
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_versions_activate/
@@ -39,7 +39,7 @@ chainctl policies versions activate {VERSION_ID | --policy=POLICY} [--output tab
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_diff.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_diff.md
index 60a6a30330..0822436463 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_diff.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_diff.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies versions diff"
 slug: chainctl_policies_versions_diff
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_versions_diff/
@@ -28,7 +28,7 @@ chainctl policies versions diff VERSION_ID VERSION_ID [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_list.md
index 46252723f0..f3cc5432fc 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies versions list"
 slug: chainctl_policies_versions_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_versions_list/
@@ -28,7 +28,7 @@ chainctl policies versions list [POLICY_NAME | POLICY_ID] [--output table|json]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_view.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_view.md
index 06e7721943..09907271d7 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_view.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_versions_view.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies versions view"
 slug: chainctl_policies_versions_view
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_versions_view/
@@ -39,7 +39,7 @@ chainctl policies versions view {VERSION_ID | --policy=POLICY} [--output json] [
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_view.md b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_view.md
index 27d929f542..8d1cef3dac 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_policies_view.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_policies_view.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl policies view"
 slug: chainctl_policies_view
 url: /chainguard/chainctl/chainctl-docs/chainctl_policies_view/
@@ -28,7 +28,7 @@ chainctl policies view [POLICY_NAME | POLICY_ID] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore.md b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore.md
index 1f6dcf494f..ca307344dc 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl sigstore"
 slug: chainctl_sigstore
 url: /chainguard/chainctl/chainctl-docs/chainctl_sigstore/
@@ -24,7 +24,7 @@ Sigstore related commands for the Chainguard platform.
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca.md b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca.md
index 680d252919..cd586f4a81 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl sigstore ca"
 slug: chainctl_sigstore_ca
 url: /chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca/
@@ -24,7 +24,7 @@ Sigstore commands related to certificate authorities
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_create.md b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_create.md
index bb6b97d043..a8beaa7fa5 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_create.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_create.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl sigstore ca create"
 slug: chainctl_sigstore_ca_create
 url: /chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_create/
@@ -36,7 +36,7 @@ chainctl sigstore ca create --group GROUP_NAME | GROUP_ID {--ca googleca --googl
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_delete.md b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_delete.md
index a47cec5eb5..75e3f64169 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_delete.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_delete.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl sigstore ca delete"
 slug: chainctl_sigstore_ca_delete
 url: /chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_delete/
@@ -42,7 +42,7 @@ chainctl sigstore ca delete SIGSTORE_ID [--yes] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_describe.md b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_describe.md
index 548d8606f4..2b2ee553b8 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_describe.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_describe.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl sigstore ca describe"
 slug: chainctl_sigstore_ca_describe
 url: /chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_describe/
@@ -35,7 +35,7 @@ chainctl sigstore ca describe [SIGSTORE_NAME | SIGSTORE_ID] [--output |json] [fl
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_list.md b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_list.md
index bc3acfac24..7fdf199a9b 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_list.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_list.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl sigstore ca list"
 slug: chainctl_sigstore_ca_list
 url: /chainguard/chainctl/chainctl-docs/chainctl_sigstore_ca_list/
@@ -29,7 +29,7 @@ chainctl sigstore ca list [--group GROUP_NAME | GROUP_ID] [--output table|json|i
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_env.md b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_env.md
index ee33a62471..0e2c7b606c 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_env.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_sigstore_env.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl sigstore env"
 slug: chainctl_sigstore_env
 url: /chainguard/chainctl/chainctl-docs/chainctl_sigstore_env/
@@ -39,7 +39,7 @@ chainctl sigstore env [SIGSTORE_ID | SIGSTORE_NAME] [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_update.md b/content/chainguard/chainctl/chainctl-docs/chainctl_update.md
index a27a4b6cc3..dae62c5360 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_update.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_update.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl update"
 slug: chainctl_update
 url: /chainguard/chainctl/chainctl-docs/chainctl_update/
@@ -30,7 +30,7 @@ chainctl update [--yes] [--force]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainctl/chainctl-docs/chainctl_version.md b/content/chainguard/chainctl/chainctl-docs/chainctl_version.md
index 915b9fc179..906acac76d 100644
--- a/content/chainguard/chainctl/chainctl-docs/chainctl_version.md
+++ b/content/chainguard/chainctl/chainctl-docs/chainctl_version.md
@@ -1,5 +1,5 @@
 ---
-date: 2023-12-12T01:57:05Z
+date: 2023-12-19T19:01:04Z
 title: "chainctl version"
 slug: chainctl_version
 url: /chainguard/chainctl/chainctl-docs/chainctl_version/
@@ -28,7 +28,7 @@ chainctl version [flags]
 ```
       --api string                   The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
       --audience string              The Chainguard token audience to request. (default "https://console-api.enforce.dev")
-      --config string                A specific chainctl config file.
+      --config string                A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
       --console string               The url of the Chainguard platform Console. (default "https://console.enforce.dev")
       --issuer string                The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
   -o, --output string                Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
diff --git a/content/chainguard/chainguard-enforce/changelog.md b/content/chainguard/chainguard-enforce/changelog.md
index 06c4e0abff..05a149992f 100644
--- a/content/chainguard/chainguard-enforce/changelog.md
+++ b/content/chainguard/chainguard-enforce/changelog.md
@@ -2,7 +2,7 @@
 title : "Chainguard Enforce Changelog"
 description: "Chainguard Enforce Changelog"
 type: "article"
-date: 2023-12-12 01:49:41 +0000 UTC
+date: 2023-12-19 18:20:18 +0000 UTC
 draft: false
 tags: ["Enforce", "Reference", "Product"]
 images: []
@@ -12,6 +12,28 @@ weight: 799
 ## Introduction
 Any customer facing changes to Chainguard Enforce or [`chainctl`](/chainguard/chainguard-enforce/how-to-install-chainctl/) are highlighted in the following notes. Any new features, bug fixes, or general ease of use improvements will be listed under the corresponding release version.
 
+### v0.1.206
+Release date: 2023-12-19
+
+Customer facing changes: N/A
+
+### v0.1.205
+Release date: 2023-12-18
+#### Feature
+- Use the environment variable `CHAINCTL_CONFIG` to specify the path to a chainctl config file. Explicitly passing a file with `--config` will take precedence over the environment variable value.
+
+
+### v0.1.204
+Release date: 2023-12-14
+#### Bug or Regression
+- [iam] Fixes iam.Lookup API to not return assumable identities for (issuer, subject) lookups.
+
+
+### v0.1.203
+Release date: 2023-12-12
+
+Customer facing changes: N/A
+
 ### v0.1.202
 Release date: 2023-12-12
 
diff --git a/static/api.json b/static/api.json
index 95e86d9087..da425b375a 100644
--- a/static/api.json
+++ b/static/api.json
@@ -2314,6 +2314,86 @@
         ]
       }
     },
+    "/registry/v1/repos/{repoId}/digests/{digest}/sbom": {
+      "get": {
+        "operationId": "Registry_GetSbom",
+        "parameters": [
+          {
+            "description": "The UIDP of the image repo to get an SBOM for.",
+            "in": "path",
+            "name": "repoId",
+            "pattern": ".+",
+            "required": true,
+            "type": "string"
+          },
+          {
+            "description": "The digest of the image to get an SBOM for.",
+            "in": "path",
+            "name": "digest",
+            "pattern": "[^/]+",
+            "required": true,
+            "type": "string"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/tenantSbom2"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "tags": [
+          "Registry"
+        ]
+      }
+    },
+    "/registry/v1/repos/{repoId}/digests/{digest}/vulnreport": {
+      "get": {
+        "operationId": "Registry_GetVulnReport",
+        "parameters": [
+          {
+            "description": "The UIDP of the image repo to get a VulnReport for.",
+            "in": "path",
+            "name": "repoId",
+            "pattern": ".+",
+            "required": true,
+            "type": "string"
+          },
+          {
+            "description": "The digest of the image to get a VulnReport for.",
+            "in": "path",
+            "name": "digest",
+            "pattern": "[^/]+",
+            "required": true,
+            "type": "string"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/tenantVulnReport"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "tags": [
+          "Registry"
+        ]
+      }
+    },
     "/registry/v1/tags": {
       "get": {
         "operationId": "Registry_ListTags",
@@ -2720,6 +2800,57 @@
         ]
       }
     },
+    "/sts/exchange_refresh_token": {
+      "post": {
+        "operationId": "SecurityTokenService_ExchangeRefreshToken",
+        "parameters": [
+          {
+            "collectionFormat": "multi",
+            "in": "query",
+            "items": {
+              "type": "string"
+            },
+            "name": "aud",
+            "required": false,
+            "type": "array"
+          },
+          {
+            "in": "query",
+            "name": "scope",
+            "required": false,
+            "type": "string"
+          },
+          {
+            "collectionFormat": "multi",
+            "description": "List of capabilities to request for the token.",
+            "in": "query",
+            "items": {
+              "type": "string"
+            },
+            "name": "cap",
+            "required": false,
+            "type": "array"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/oidcTokenPair"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "tags": [
+          "SecurityTokenService"
+        ]
+      }
+    },
     "/tenant/v1/clusters": {
       "get": {
         "operationId": "Clusters_List",
@@ -4752,6 +4883,18 @@
       },
       "type": "object"
     },
+    "oidcTokenPair": {
+      "description": "ExchangeRefreshToken returns a pair of token, in order to allow\nrefresh token to also be rotated.",
+      "properties": {
+        "refreshToken": {
+          "$ref": "#/definitions/oidcRawToken"
+        },
+        "token": {
+          "$ref": "#/definitions/oidcRawToken"
+        }
+      },
+      "type": "object"
+    },
     "pingResponse": {
       "properties": {
         "response": {